Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpbbcREJ2GvqeOU9U5-NvypDxbY.roa
File: kpbbcREJ2GvqeOU9U5-NvypDxbY.roa (raw, json)
Hash identifier: 4S70l+n0YbF2cqRXLXZbCCeljQ4DYmqc+g22ie2PqNY=
Subject key identifier: 92:96:DB:71:11:09:D8:6B:EA:78:E5:3D:53:9F:8D:BF:2A:43:C5:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36D5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpbbcREJ2GvqeOU9U5-NvypDxbY.roa
Signing time: Mon 10 Feb 2025 13:54:44 +0000
ROA not before: Mon 10 Feb 2025 13:54:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14037 (0x36d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9296DB711109D86BEA78E53D539F8DBF2A43C5B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a9:fb:93:5d:55:7e:6b:0d:6b:7e:10:d2:b9:
9f:2c:d2:ec:a3:0c:71:ef:a6:f7:56:43:ad:0e:d7:
71:4f:ed:8d:e4:c8:cb:8c:a3:3c:dc:3d:cd:cd:4d:
26:5c:c4:65:44:d1:90:9f:94:45:03:fc:79:60:f6:
bc:67:c3:38:09:f1:58:3a:e8:a5:7a:d5:2f:8a:d3:
25:2c:75:6b:fa:dd:22:eb:77:5d:0e:f2:8d:d8:04:
f5:99:50:e1:50:ff:98:c4:3c:43:ba:31:95:04:19:
f1:8c:3d:84:c9:89:05:8e:74:0b:1e:b4:02:11:29:
ce:34:2a:9b:82:1f:81:bf:cc:cb:34:17:60:ef:e4:
1a:f8:cb:20:90:12:b9:ca:ff:a0:8b:e5:0a:cb:ed:
df:2f:fc:6e:68:11:8a:23:0b:71:15:e2:51:1d:aa:
68:c7:4b:ca:c3:71:3e:93:f3:e4:44:5c:b8:f3:47:
b1:76:77:eb:0d:39:d1:f4:15:aa:8d:c2:e9:58:cc:
2d:12:5d:7f:34:21:17:c5:39:da:66:f8:65:25:51:
6c:12:27:11:a2:49:8f:10:03:fe:bf:29:ed:cc:b7:
7c:62:4a:58:c2:32:35:16:39:bc:5a:88:b6:81:06:
ea:9c:8e:d1:66:f7:b4:c5:f3:14:b5:81:a6:6d:a4:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:96:DB:71:11:09:D8:6B:EA:78:E5:3D:53:9F:8D:BF:2A:43:C5:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kpbbcREJ2GvqeOU9U5-NvypDxbY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a8:bf:86:51:ed:ac:93:77:8a:bf:9b:43:9f:51:d0:c5:97:
dc:7d:f2:8f:ad:ce:26:df:dc:24:c0:74:6f:b1:e6:39:b8:de:
46:98:9a:bb:48:68:61:03:41:b9:a4:0e:0f:54:4b:9c:0c:30:
de:50:31:3e:64:1f:c5:ae:78:45:3d:f3:fd:8a:6a:16:b0:fa:
8d:a0:b4:2f:85:9a:6c:71:6e:12:c6:35:f5:23:d6:8f:d2:93:
a0:37:7f:99:a8:bc:d1:b5:b5:c8:6b:0c:2f:a3:53:c0:4d:ab:
a6:56:ca:6b:98:a5:39:bb:44:c6:fb:59:a4:3f:ff:e0:4a:5e:
77:86:3a:1a:c6:d3:4d:09:03:78:74:1d:47:21:97:2d:b6:02:
e2:f4:65:54:19:41:b3:51:cc:73:22:c8:05:e3:8e:20:bf:e2:
ab:2d:e6:c1:1d:9e:92:ae:a2:e5:5e:d9:c6:6c:df:f3:a8:97:
db:6c:a8:e3:9d:6a:30:2a:ca:e3:44:4f:46:bb:05:2f:05:1d:
0b:f0:91:ec:58:0f:b0:7d:82:4b:52:36:c4:32:0a:7a:96:c4:
94:be:d9:5e:ce:87:dc:c5:dd:5f:4e:61:8e:f7:4e:90:a8:ab:
fb:c0:ad:12:ea:b2:b1:f2:af:61:96:13:6d:ca:9e:33:1a:cd:
65:68:96:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:20 2025 by rpki-client